Skip to main content


Home NetFlow

NetFlow

NetFlow definition

NetFlow is a network protocol designed for collecting IP network traffic data that enters or exits a particular interface. The original NetFlow protocol was developed (and is still owned) by Cisco Systems, Inc, but the word “NetFlow” has been adopted as a general term for all types of flow records and datagrams. NetFlow variants and derivatives often follow the “xFlow” naming pattern as a result.

NetFlow captures information such as the source and destination IP address, the source and destination port, transferred packets and bytes, and the timing of the transmission.

See also: data flow model

Netflow variants

  • NetFlow: The term “NetFlow” legally refers to the protocol developed by Cisco. NetFlow was introduced in the 1990s as a packet switching technology for Cisco routers. The most recent version of the official NetFlow is v9.
  • IP Flow Information Export (IPFIX): An IETF standard flow record format that is sometimes called “NetFlow v10.” IPFIX was developed as a more universal (non-proprietary) solution to analyzing network flow data.
  • sFlow: A flow protocol and data record standard developed by InMon Corp. Unlike the original NetFlow, sFlow does not sample every packet or timestamp traffic flows — instead, it uses statistical sampling methods for flow documentation to reduce the amount of information that needs to be processed.